![]() |
|
Plagegeister aller Art und deren Bekämpfung: Internetprobleme, werde wahnsinnigWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
![]() |
|
![]() | #1 |
![]() ![]() ![]() | ![]() Internetprobleme, werde wahnsinnig Führe mal einen Escan aus. Erstelle für den eScan einen neuen Ordner (=Verzeichnis) "bases" auf "c:\". Lade den eScan runter, entpacke ihn mit einem Zip-Programm in diesen neuen Ordner. Beachte dazu die Anleitung . Update den eScan online (siehe Anleitung) und führe ihn offline im abgesicherten Modusaus(Haken setzen bei All Local Drives und All Scan Files). Der eScan braucht ca 1 Stunde. Die gefundenen Viren werden von hand gelöscht. Wir geben am Forum Anleitung dazu. --> Teile uns bitte mit: wieviel Viren auf Deinem Rechner gefunden wurden - es sieht so aus: => Total Files Scanned: => Total Virus(es) Found: => Total Disinfected Files: => Total Files Renamed: => Total Deleted Files: => Total Errors: => Time Elapsed: => Virus Database Date: => Virus Database Count: =>Total Number of Files Scanned: =>Total Number of Virus(es) Found: ***** Scanning complete. ***** --> Wie die Viren heißen, möchten wir auch wissen: "öffne die mwav.log (oder die mwXface.log) -> Bearbeiten -> Suchen -> infected eingeben -> Weitersuchen -> Treffer markieren/kopieren und ins Forum übertragen." (Cidre zitiert) |
![]() | #2 |
| ![]() Internetprobleme, werde wahnsinnig Lade mir gerade den E-Scan herunter(dauert halt mit dem Modem etwas länger).Wenn ich alles nach deiner Anleitung gemacht habe werde ich mich wieder melden.Wird aber etwas dauern
__________________![]() Aber eine Frage zu meinem Problem habe ich noch. Ist dies jetzt was alltägliches oder doch schon außergewöhnlich? Gruß Cat |
![]() | #3 | ||
![]() ![]() ![]() | ![]() Internetprobleme, werde wahnsinnigZitat:
Zitat:
Wenn du dir das ersparen willst: Mittels Rechtsklick-> "Ziel speichern unter..." diese Datei runterladen und ausführen. Dann einfach den Inhalt der c:\find.txt hier posten. Funktioniert nur, wenn du eScan gemäß der Anleitung ausführst! |
![]() | #4 |
| ![]() EScan Ergebnis (HEUL) Hallo, anbei sende ich euch mal die Daten vom EScan, was er alles gefunden hat. Gelöscht habe ich davon noch nichts. Weiter unten sind auch noch einige Dateien aufgeführt, die der Norton mal vor längerer Zeit fand und die in Quarantäne liegen. Wie kann ich diese Dateien am einfachsten entfernen? Gruß Cat Tue Apr 19 16:46:34 2005 => Scanning HKLM\SYSTEM\CurrentControlSet\Services\VxD Tue Apr 19 16:46:46 2005 => System found infected with Alexa Spyware/Adware ({c95fe080-8f5d-11d2-a20b-00aa003c157a})! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "Alexa Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 16:46:46 2005 => Offending value found in HKCU\Software\sais !!! Tue Apr 19 16:46:46 2005 => System found infected with sais Spyware/Adware! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "sais Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 16:46:46 2005 => Offending value found in HKLM\Software\Microsoft\Windows\CurrentVersion\policies\ameopt !!! Tue Apr 19 16:46:46 2005 => System found infected with ameopt Spyware/Adware! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "ameopt Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 16:46:46 2005 => Offending value found in HKCU\Software\ist !!! Tue Apr 19 16:46:46 2005 => System found infected with ist Spyware/Adware! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "ist Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 16:46:46 2005 => Offending value found in HKLM\Software\tsa !!! Tue Apr 19 16:46:46 2005 => System found infected with tsa Spyware/Adware! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "tsa Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 16:46:46 2005 => Offending value found in HKCU\Software\avenue media !!! Tue Apr 19 16:46:46 2005 => System found infected with avenue media Spyware/Adware! Action taken: No Action Taken. Tue Apr 19 16:46:46 2005 => File System Found infected by "avenue media Spyware/Adware" Virus. Action Taken: No Action Taken. Tue Apr 19 17:20:54 2005 => File C:\RECYCLER\NPROTECT\00039028.exe infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: No Action Taken. Tue Apr 19 17:20:55 2005 => File C:\RECYCLER\NPROTECT\00039030.exe infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 17:20:56 2005 => File C:\RECYCLER\NPROTECT\00039061.EXE infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Apr 19 17:20:56 2005 => File C:\RECYCLER\NPROTECT\00039063.dll infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Apr 19 17:21:58 2005 => File C:\System Volume Information\_restore{2C4C3378-5640-4051-A17A-D029AC904ECA}\RP72\A0046564.exe infected by "Trojan-Downloader.Win32.TSUpdate.j" Virus. Action Taken: No Action Taken. Tue Apr 19 17:23:13 2005 => File C:\System Volume Information\_restore{2C4C3378-5640-4051-A17A-D029AC904ECA}\RP73\A0047582.exe infected by "Trojan-Downloader.Win32.TSUpdate.k" Virus. Action Taken: No Action Taken. Tue Apr 19 17:23:52 2005 => File C:\System Volume Information\_restore{2C4C3378-5640-4051-A17A-D029AC904ECA}\RP73\A0047625.exe infected by "Trojan-Downloader.Win32.TSUpdate.l" Virus. Action Taken: No Action Taken. Tue Apr 19 17:23:57 2005 => File C:\System Volume Information\_restore{2C4C3378-5640-4051-A17A-D029AC904ECA}\RP73\A0047716.DLL infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 17:29:04 2005 => File C:\System Volume Information\_restore{2C4C3378-5640-4051-A17A-D029AC904ECA}\RP75\A0049646.dll infected by "not-a-virus:AdWare.AdMir.a" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:13 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\02A96BA3 infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:13 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\02AC159F infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:13 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\10F360AE infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DE34288 infected by "Trojan-Downloader.Win32.VB.ft" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DE66C85 infected by "Trojan-Downloader.Win32.TSUpdate.j" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DEA1681 Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DEA1681 infected by "Trojan-Downloader.Win32.IstBar.ij" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DF31476 Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DF31476 infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DF73E73 Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DF73E73 infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DFA686F Tue Apr 19 18:09:14 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1DFA686F infected by "Trojan-Downloader.Win32.Dyfuca.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:14 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E003C68 Tue Apr 19 18:09:15 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E003C68 infected by "not-a-virus:AdWare.ToolBar.SideFind.a" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:15 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E046664 Tue Apr 19 18:09:15 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E046664 infected by "not-a-virus:AdWare.ToolBar.SideFind.a" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:15 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E071061 Tue Apr 19 18:09:15 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E071061 infected by "not-a-virus:AdWare.ToolBar.SideFind" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:15 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E0A3A5D Tue Apr 19 18:09:15 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E0A3A5D infected by "not-a-virus:AdWare.ToolBar.SideFind.a" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:15 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E0E645A Tue Apr 19 18:09:16 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E0E645A infected by "Trojan-Downloader.Win32.TSUpdate.j" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:16 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E110E56 Tue Apr 19 18:09:17 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E110E56 infected by "Trojan-Downloader.Win32.TSUpdate.k" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:17 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E1B0C4B Tue Apr 19 18:09:18 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\1E1B0C4B infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:18 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\25A401B8.htm Tue Apr 19 18:09:18 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\25A401B8.htm infected by "Exploit.HTML.Mht" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:18 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\287A4EB2 Tue Apr 19 18:09:18 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\287A4EB2 infected by "Trojan-Downloader.Win32.TSUpdate.j" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:18 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\31331148 Tue Apr 19 18:09:18 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\31331148 infected by "not-a-virus:AdWare.ToolBar.Azesearch.b" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:18 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\32DD60A1 Tue Apr 19 18:09:19 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\32DD60A1 infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:19 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\33A414A9 Tue Apr 19 18:09:19 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\33A414A9 infected by "Trojan-Downloader.Win32.TSUpdate.j" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:19 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\371E2AC4 Tue Apr 19 18:09:19 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\371E2AC4 infected by "not-a-virus:AdWare.ToolBar.Azesearch.b" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:19 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\411D0499 Tue Apr 19 18:09:19 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\411D0499 infected by "Trojan-Downloader.Win32.IstBar.ir" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:19 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\59C663C4 Tue Apr 19 18:09:19 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\59C663C4 infected by "not-a-virus:AdWare.180Solutions" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:19 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\611207BB Tue Apr 19 18:09:20 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\611207BB infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:20 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\6E422CB2 Tue Apr 19 18:09:20 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\6E422CB2 infected by "not-a-virus:AdWare.Xupiter.m" Virus. Action Taken: No Action Taken. Tue Apr 19 18:09:20 2005 => Scanning File D:\Norton SystemWorks\Norton Antivirus\Quarantine\6EB27473 Tue Apr 19 18:09:20 2005 => File D:\Norton SystemWorks\Norton Antivirus\Quarantine\6EB27473 infected by "Trojan-Downloader.Win32.Dyfuca.dx" Virus. Action Taken: No Action Taken. Tue Apr 19 18:10:06 2005 => File D:\RECYCLER\NPROTECT\00001732.BUD infected by "Trojan-Downloader.Win32.IstBar.gen" Virus. Action Taken: No Action Taken. Tue Apr 19 18:10:19 2005 => Total Objects Scanned: 47260 Tue Apr 19 18:10:19 2005 => Total Virus(es) Found: 44 Tue Apr 19 18:10:19 2005 => Total Disinfected Files: 0 Tue Apr 19 18:10:19 2005 => Total Files Renamed: 0 Tue Apr 19 18:10:19 2005 => Total Deleted Objects: 0 Tue Apr 19 18:10:19 2005 => Total Errors: 4 Tue Apr 19 18:10:19 2005 => Time Elapsed: 01:24:02 Tue Apr 19 18:10:19 2005 => Virus Database Date: 2005/04/19 Tue Apr 19 18:10:19 2005 => Virus Database Count: 126785 Tue Apr 19 18:10:19 2005 => Scan Completed. Tue Apr 19 19:24:37 2005 => Virus Database Date: 2005/04/19 Tue Apr 19 19:24:37 2005 => Virus Database Count: 126785 Tue Apr 19 19:24:43 2005 => AV Library Unloaded (3)... |
![]() | #5 |
![]() ![]() ![]() ![]() | ![]() Internetprobleme, werde wahnsinnig Lade dir Spybot und Adaware runter: Adaware: http://www.lavasoftusa.com/german/software/adaware/ Spybot: http://www.safer-networking.org/de/spybotsd/index.html Wechsle in den abgesicherten Modus bei deaktivierer Systemwiederherstellung: http://www.systemwiederherstellung-d...indows-xp.html Lösche den Inhalt folgender Ordner: C:\RECYCLER D:\RECYCLER D:\Norton SystemWorks\Norton Antivirus\Quarantine Jetzt Spbot und Adaware ausführen und Probleme beheben. Danach neu booten, Sytemwiederherstellung aktivieren und einen neuen HJT-Logerstellen und ihn hier im Forum posten
__________________ ![]() ![]() |
![]() |
Themen zu Internetprobleme, werde wahnsinnig |
antivirus, antivirus scan, bho, browser, dateien, drivers, einstellungen, excel, explorer, fehler, funktionieren nicht, funktioniert nicht mehr, google, helper, hijack, hijackthis, mehrere, microsoft, monitor, neu, programme, quara, s-1-5-18, security, security center, settings manager, software, suche, symantec, system volume information, temp, urlsearchhook, warum, windows, windows xp |